BUT i'll educate you as to what it did.
so i got it from a friend i hadnt heard from in ages, an IRL friend.
clicking the link sends you to a download page. no harm is done yet.
OPENING what was sent in the download does this.
Mass spam on chat the link to all your listed friends, online or not.
takes certain items from your various steam inventory types (in my case TF2)
sends them to a users account automatically, no prompt windows or nothing, bypasses the whole trade window entirely.
and it looks for ones it can either sell, or has high trade value. in my case, my vintage Prussian hat for medic.
if you get a strange link like this with 0 explaination do not click it. steam is run almost entirely through URLs and can be exploited just as easily through a web page.
again sorry for the panic but most of my friends list is members or former members of this group.